So it would be more hassle to disable encryption specifically for vaultwarden.īesides that, the Bitwarden apps (mobile, Desktop, Browser addon) also cache your vault data. Not really necessary for vaultwarden, as most stuff is already encrypted on REST but I already encrypt everything. The backup is AES encrypted by Duplicati per default. One is Google Drive and one is a RPi4 running at my parent's house.
The archive and all Docker volume data is backup'd daily onto two different remote, external sources. This container safely dumps the database and creates a compressed archive on my ZFS mirrored NAS. For example if I delete something by accident or crypto malware encrypts my filesĭaily backups using. Shadow copies via TrueNAS ensures that I can travel back in time to multiple ZFS snapshots. SSD ZFS mirror setup (RAID) ensures availability in case drives fail Also tested it multiple times by simulating disaster recovery. I use a similar approach, which works just fine. This gave me enough feeling of safety to invite my family to bitwarden. I did two trial runs where I tried to restore my data from scratch and it worked. I do not think it is an issue as all the data is stored encrypted but I might be wrong. Thus I sync my bitwarden folder with google drive. I felt like this was not enough to secure this valuable data. My Synology drives are configured in Synology hybrid raid, hence I have data protection for 1-drive. An hour later Hyper Backup makes a single-version backup of all my docker volumes. I run a cron job once a day, which runs mariadb-dump and deletes the dump from the day before. I am looking for general advice/feedback on how to safely back up crucial data. I will post a write-up soon cause I feel like it could be helpful.īefore convincing my family to move to bitwarden, I had to make sure that all their data is safe. It took quite a bit of tinkering but I got it to work in the end. About a month ago I set up bitwarden-unified on our Synology home server.
0 kommentar(er)
